
Error: rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
File: A7HsVImnJFpUDQglPfhVKV6iF1s.mft (raw, json)
Hash identifier: qzlIVzKqOGendg+5LZnf9FdLy12pqU9XYQ938M+nIiI=
Subject key identifier: CD:45:1A:ED:46:0C:D8:E1:7A:1D:18:0B:75:63:95:7B:2F:94:0D:1C
Authority key identifier: 03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
Certificate issuer: /CN=F361B707AF/serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Certificate serial: 01C4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
Manifest number: 01C0
Signing time: Mon 21 Sep 2026 04:59:41 +0000
Manifest this update: Mon 21 Sep 2026 04:59:40 +0000
Manifest next update: Wed 23 Sep 2026 04:59:40 +0000
Files and hashes: 1: A7HsVImnJFpUDQglPfhVKV6iF1s.crl (hash: XYc6t+Di+UhxqewQkq/HnFKNr6ceVG6fjGZpb+w+WRk=)
2: CB94846E5D6211F0B1684ACBDAE4EC9C.roa (hash: q7K9u94mHC6e9oaI7qiGUP+yKcVwp0btej/mCAe6shI=)
3: ADE00A565D6211F098A518CBDAE4EC9C.roa (hash: jpOBdkhBjVVYI3nmszZNhPcIYkBWvx4dgsFhzZiXUPs=)
4: 75866D765D6211F093F8A7CADAE4EC9C.roa (hash: UWso/XNlMKwadlU6ptT5mDWK+nIqDiP9OSyNwe4vkPQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Sep 2026 04:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B707AF, serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Validity
Not Before: Sep 21 04:59:40 2026 GMT
Not After : Sep 23 04:59:40 2026 GMT
Subject: CN=6ab0b9bd-c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:e6:6b:5c:c1:b3:b8:8b:54:76:68:3d:c5:
1e:33:74:23:eb:0e:7c:12:91:22:f4:fc:60:32:7c:
48:fe:71:68:8e:ac:cf:3e:aa:7c:ea:d4:41:89:20:
5d:bb:89:fa:3b:3f:59:43:ac:cb:29:e0:19:8a:9d:
b8:01:91:f5:79:39:49:5e:e3:48:ea:9c:fd:dd:ef:
10:d6:3d:23:01:63:fc:3d:08:19:7c:f0:1a:c3:c1:
95:77:6c:db:b5:b1:74:44:26:86:a2:92:8b:a4:ef:
23:ab:c3:6c:81:18:ca:eb:55:47:93:47:20:0b:a8:
67:a2:2a:02:4e:e2:dd:f0:3e:dc:b3:3d:5d:9f:7f:
a0:95:38:31:ff:d9:7b:72:74:4d:f3:f8:8e:2b:02:
cd:bf:5b:25:eb:80:83:fa:2f:11:8d:d5:56:1a:ee:
3f:0c:05:3e:79:0c:74:c8:63:de:45:32:14:f2:bb:
66:e5:d7:75:2c:98:f5:18:5b:a3:a2:de:47:b8:71:
4b:a5:26:56:63:98:6d:d7:aa:a7:1c:72:42:11:40:
40:92:07:57:95:a5:e9:e1:92:2d:e5:11:2a:ae:13:
d3:77:4d:ec:3b:21:6e:9e:2c:08:39:63:78:5b:ec:
5e:93:02:d1:bd:ab:c0:33:c1:0d:e0:9b:5f:2e:97:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:45:1A:ED:46:0C:D8:E1:7A:1D:18:0B:75:63:95:7B:2F:94:0D:1C
X509v3 Authority Key Identifier:
keyid:03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2c:8c:f0:42:c6:36:f3:99:b2:ce:fc:1a:fb:4c:a5:fe:d5:
80:20:01:2a:3f:42:d3:24:ed:5b:47:03:de:4b:52:73:b7:bb:
a0:4f:c1:41:f5:b1:46:24:16:1f:5e:38:7b:1b:71:33:34:36:
8f:32:ae:ca:e4:79:af:9f:8d:af:7a:89:a6:b3:1e:5d:a2:44:
95:50:3a:52:b1:b3:2b:4f:43:4b:3b:cc:73:8e:2f:a4:5d:2b:
10:d1:f2:f7:80:3f:60:48:47:9a:ba:d4:d4:ed:25:e0:97:41:
27:68:ee:0d:ad:95:d5:4f:e6:c6:fd:6f:4d:9b:85:46:17:eb:
79:49:ab:29:6c:09:f6:48:14:d9:7b:de:e5:92:06:30:2a:6a:
e2:f5:77:91:52:a4:a6:9b:00:92:f6:82:c7:76:f9:fc:51:46:
f4:27:dd:ae:75:19:b4:34:4e:e5:25:ed:57:5f:c0:79:38:c9:
7a:09:69:32:32:52:93:14:6c:d0:57:38:bd:d4:b8:b8:e3:00:
cb:5e:83:b8:ca:8f:5b:a1:9e:d2:3b:df:aa:b0:43:45:29:de:
6a:c2:f0:08:a7:fd:9a:61:f8:6a:e0:36:59:27:de:ee:83:3d:
aa:3f:49:ea:d5:80:ea:64:11:7e:58:b3:8b:61:be:da:7e:8e:
4f:33:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:27:47 2026 by rpki-client